View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0027572 | mantisbt | administration | public | 2020-11-21 11:11 | 2023-10-31 16:36 |
Reporter | dregad | Assigned To | atrol | ||
Priority | normal | Severity | minor | Reproducibility | N/A |
Status | assigned | Resolution | open | ||
Target Version | 2.27.0 | ||||
Summary | 0027572: Improve management of failed logins and locked accounts | ||||
Description | Administrators currently have no way to identify locked or soon-to-be locked accounts. We should display the failed login count on Manage User pages, as well as an indication that the account is locked. | ||||
Tags | No tags attached. | ||||
@dregad I got no approval from @vboctor for this, see discussion in https://github.com/mantisbt/mantisbt/pull/1632 |
|
I had absolutely no recollection of this other issue and your PR, despite having approved it... but I failed to follow the subsequent discussion and did not realize you gave up on it. That said, it's funny that I came up with the same need as you several months later; actually it was requested to me by a project I'm helping occasionally. To be honest, I don't buy the it's clutter argument. As for the information not being actionable I also disagree, as it gives the admin an immediate view of accounts that are locked or about to be (this was requirement that I got). I don't know about the information inaccurate or irrelevant for auth plugins, I can't think of such scenario, but in that case as you proposed, not showing it when $g_max_failed_login_count is OFF should cover it. |
|
Now there is a user asking for it, see https://www.mantisbt.org/forums/viewtopic.php?p=73324#p73324 |
|
I think we should merge it. |
|
Reopend the PR after fixing merge conflicts. |
|